Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: uBegac2MbnLNFl9tEBG1w0uXLdpt+ivc5YsSoRov7OM=
Subject key identifier: F0:19:14:A2:60:17:36:7D:34:33:95:17:DB:3C:89:F7:B5:ED:3A:04
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 0199FC5826114DC72E620F803B3EB9EEEF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 03D0
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: 0HzbYGhZJKnJx/7nS7QeQjAywsgn9Pi8rTcESE3hpDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:26:11:4d:c7:2e:62:0f:80:3b:3e:b9:ee:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=f01914a26017367d34339517db3c89f7b5ed3a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:45:f0:d9:01:36:00:92:7f:2c:30:91:06:
34:aa:ed:24:3f:c7:dc:9c:e2:0d:77:5b:f3:4f:3c:
c0:e8:5e:c9:3c:6e:24:0d:fb:77:13:46:8d:35:ef:
b7:48:32:7b:98:42:ac:06:92:b8:04:19:24:66:6c:
fa:8b:ac:e4:ef:db:d5:9e:0e:29:e2:b9:b5:ee:d6:
e7:26:10:c1:6c:85:6d:da:64:02:38:06:e3:fa:94:
63:3d:c9:2f:63:8f:6e:81:20:80:11:b0:53:c5:33:
fe:97:e7:14:6a:7e:69:5e:42:bd:f9:9b:2f:8c:da:
83:01:d5:29:f7:2d:7a:cd:44:2d:30:0b:62:8b:74:
ec:be:02:0d:6f:84:1f:b7:60:50:41:01:db:ef:00:
95:ad:2b:19:aa:aa:88:11:a1:c4:9d:30:47:88:86:
da:5e:3d:31:68:b9:eb:2b:a1:11:6c:cf:00:75:b6:
27:a1:9c:ab:93:52:c1:80:3f:7e:f1:93:14:48:7e:
24:1f:19:de:06:b9:a2:2b:b5:07:19:12:31:c9:91:
60:89:1e:96:40:48:44:aa:a9:3a:96:32:d2:b6:74:
69:e9:6b:60:c4:b7:fb:8a:e4:1d:08:75:4b:2d:fa:
38:32:42:8d:51:be:67:9f:6a:10:e3:99:5c:96:f8:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:19:14:A2:60:17:36:7D:34:33:95:17:DB:3C:89:F7:B5:ED:3A:04
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:df:4a:88:6e:50:8a:a4:fc:ab:bd:c6:91:ce:f6:d9:ed:f4:
5b:69:f2:a2:70:09:f4:64:55:cc:e1:0d:f8:83:33:53:01:1e:
59:88:b2:a3:61:2b:b4:18:ef:eb:5e:65:1f:2f:21:82:c0:37:
48:a7:a5:c3:91:65:13:74:7b:41:63:19:71:cd:6f:b9:52:6f:
b6:e0:e1:8f:3b:75:f4:b0:6f:e4:d7:a1:48:3e:13:cb:5d:30:
67:0f:63:a3:fd:77:b7:7f:d4:d5:71:30:04:b1:19:83:2b:5c:
f8:b6:a3:42:57:e1:d1:ff:5a:c8:d6:7b:fe:50:18:5a:fb:d6:
3d:9e:9b:82:23:25:50:3a:19:79:4c:5a:63:e7:de:6f:b8:ae:
36:2f:f6:63:1b:02:27:3b:5b:f3:44:e9:19:60:be:26:6f:bf:
0c:7a:59:8e:75:89:e9:2c:a5:a1:59:ed:28:85:46:2c:16:ba:
3c:a3:ca:95:ca:21:a2:99:25:b7:9c:66:f9:11:d3:8d:d0:80:
56:5e:0e:c2:15:19:f2:c4:59:e2:33:76:df:f8:86:2d:6b:f6:
fb:65:07:b9:68:73:b8:44:0e:41:e9:cb:b7:7d:02:65:ee:33:
e6:34:36:a2:cc:9f:3d:e1:a7:c4:55:b0:14:25:5f:6c:e9:40:
0d:39:b8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:05 2025 by rpki-client